Saferagenticai MCP Server

by nellinc Your server? Claim it

answering

Saferagenticai MCP is answering right now. Last checked 15 min ago. 999 installs a week from pypi. It exposes 10 tools. Last commit 3 Sep 2026.

Read-only tools over the Safer Agentic AI framework: 239 patterns + 15 heuristics.

Installs per day peak 452 · avg 65 · +693% w/w

a month agotoday

Uptime history 91 days of history · worst day 91%

91 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

916 ms

Response time

average over 24h

999

Installs / week

npm and PyPI

What changed 12

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 30 September 2026. No other catalogue keeps this.

6 Nov 3 tool descriptions were rewritten list_requirements, resolve_id, search_patterns

6 Nov a tool changed the parameters it asks for find_patterns_for_task

6 Nov a tool changed version

2 Nov a tool changed version

16 Oct 2 tools disappeared list_unreviewed, review_stats

16 Oct a tool changed version

1 Oct a tool changed version

30 Sep a tool description was rewritten search_patterns

30 Sep a tool changed version

What the code does

We read the source, 1 d ago · tools taken from the live server · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Claims read-only, but the code runs commands saferagenticai_mcp/framework_loader.py:285, [пакет] saferagenticai_mcp/framework_loader.py:312

                data = yaml.load(yf.read_text(), Loader=_YamlLoader)

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] saferagenticai_mcp/_diagnostics.py:1, [пакет] saferagenticai_mcp/query_vocabulary.py:1

этот файл ставится пользователю, но в репозитории его нет

Unsafe deserialization saferagenticai_mcp/framework_loader.py:285, [пакет] saferagenticai_mcp/framework_loader.py:312

                data = yaml.load(yf.read_text(), Loader=_YamlLoader)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Saferagenticai MCP and you get told the day something new turns up.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 15 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add saferagenticai-mcp --transport http https://mcp.saferagenticai.org/mcp

Settings → Connectors → Add custom connector, then paste this address

https://mcp.saferagenticai.org/mcp

~/.codex/config.toml

[mcp_servers.saferagenticai-mcp]
url = "https://mcp.saferagenticai.org/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "saferagenticai-mcp": {
      "url": "https://mcp.saferagenticai.org/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "saferagenticai-mcp": {
      "type": "http",
      "url": "https://mcp.saferagenticai.org/mcp"
    }
  }
}

Available tools 10

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

operational

get_operational_heuristic

Retrieve a single operational heuristic by id (e.g., 'OH::geoffrey-pattern'). Returns the full entry: principle, framework mapping, evidence sources from production deployment, design patterns, anti-patterns, and discovery narrative.

list_operational_heuristics

List operational heuristics distilled from production agentic AI deployment (Claude Code, Rewind). These are cross-cutting safety principles discovered through building and operating AI agents, mapped to framework suites. Optional filters: suite_id (heuristics relevant to a specific suite), query (keyword search across titles and principles). Separate from the normative pattern layer — different category of knowledge.

patterns

find_patterns_for_task

Given a natural-language task description (e.g., 'I'm building a tool-using agent that runs shell commands'), return the most relevant patterns grouped by suite. Use this as a starting point for any cross-cutting design question; then follow up with get_requirement on specific pattern_ids. Defaults to verbosity='compact' (cheap triage); pass 'full' to inline snippets and confidence flags.

search_patterns

Field-weighted keyword search across the framework. Terms match at word starts on lowercased text and are IDF-weighted, so rare terms outrank ubiquitous ones; field weights: title 10x, summary 4x, SFR text 3x (all of a subgoal's SFRs scored as one field), description 2x, pattern body 1x. `matched_in` reports the highest-weighted field that matched. Common practitioner phrases are expanded to the framework's own terms at half weight (reported in `expanded_terms`), and requirement ids such as d2.1, D2-1 or G1.2 are pinned to the top (`matched_in: identifier`). No semantic / embedding search — known limitation, see /mcp.html. Use verbosity='compact' to drop snippets and confidence flags (~70% smaller payload) when triaging.

cross

get_cross_references

Return outgoing adjacencies for a pattern. `explicit_cross_references` are author-asserted (each pattern's `cross_references` YAML field). `inferred_adjacent` (when include_inferred=true) currently returns *same-suite siblings only* — it does not do semantic similarity. Treat inferred entries as 'neighbours worth scanning,' not as endorsed dependencies.

requirement

get_requirement

Retrieve one subgoal (framework normative content + Pattern layer guidance) by pattern_id (e.g., 'D3::idx2::sandboxing') or display_id (e.g., 'D3.2'). display_id may resolve to multiple subgoals — underlined variants share display_ids.

requirements

list_requirements

List subgoals matching filters (suite_id, suite_type, content_type, min_confidence, missing_pattern_only). Results capped by limit (default 50, max 100). Every pattern is a model-generated draft (review_status generated_draft; there is no human-review process); confidence is the drafting model's own rating of its draft.

resolve

resolve_id

Resolve a loose reference (partial id, display_id, slug fragment, or title keyword) to canonical pattern_id(s). Case, separator and G/I prefix are normalised (d2.1, D2-1, 'D2 1', G1.2); a hyphen or space returns both the numbered requirement and its underlined variant. Call this when you have a rough reference and need the exact id before calling get_requirement. Always returns candidates — never 'not found'.

reverse

get_reverse_references

Return patterns that reference the given pattern_id in their cross_references. Complement to get_cross_references (outgoing); this shows incoming. Use to find all consumers of a given pattern.

suites

list_suites

List all 16 suites in the SaferAgenticAI framework (9 drivers + 7 inhibitors) with subgoal counts and titles. Call this first to orient.

Tools removed

Tools this server used to expose. Anything built against them stopped working on the day they went.

list_unreviewed

removed 16 Oct 2026

review_stats

removed 16 Oct 2026

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.saferagenticai.org/mcp	streamable-http	answering	963 ms	15 min ago

Alternatives to Saferagenticai MCP

same job, measured the same way

Wondel Skills MCP

by mjaskolski

Read-only MCP server over 50 book-based agent skills: routes a task to the right framework.

5 tools answering

Super Log

by super-log

Query your local super-log bench from an AI agent - read-only log tools over the hub.

60 installs/wk local only

Generative AI Maturity Framework

by genaimaturity

Read-only MCP for the Generative AI Maturity Framework: glossary, dimensions, levels, tools.

9 tools answering

Llestia

by powhermes

Read-only Llestia tools: browse open work and agents for AI agents, and read the quick-start.

5 tools answering

Recon Kit MCP

by nan786521

Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

275 installs/wk local only

OSF CLI Go

by edithatogo

Read-only MCP tools for authenticated Open Science Framework projects and files.

local only

Agent Core

by kinbinghua-lgtm

Deterministic computation tools for AI agents. Zero dependencies, no network, read-only.

43 installs/wk local only

Anteroom

by anteroom

Frontier-AI vendor commitments, safety framework history, corpus, and partnership patterns.

5 tools answering

Saferagenticai MCP — questions

Answers built from our own checks of this server.

What can Saferagenticai MCP do?

It exposes 10 tools, read directly from the server on our last check. Among them: find_patterns_for_task, get_cross_references, get_operational_heuristic, get_requirement, get_reverse_references, list_operational_heuristics and 4 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is Saferagenticai MCP mostly used for?

Its tools cluster around patterns and operational. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is Saferagenticai MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 916 ms. The bar chart above shows every period we have measured.

Did Saferagenticai MCP ever remove tools?

Yes. list_unreviewed, review_stats are no longer exposed — we recorded the date each one disappeared. A tool vanishing usually means a breaking change for anything that depended on it.

How do I connect Saferagenticai MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Saferagenticai MCP need an API key?

No. Saferagenticai MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 10 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Saferagenticai MCP?

It answers our handshake in 916 ms on average, which is faster than 6% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use Saferagenticai MCP?

The pypi package saferagenticai-mcp was installed 999 times in the last week. Week over week that is +693%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Saferagenticai MCP open source?

The code is open source: it is published under the MIT licence, written in Python and 1 stars on GitHub. The licence covers the code in the repository, not the hosted service at mcp.saferagenticai.org, which runs on its operator's own terms.